Commit History
18 days ago
-
security: D5-A — accept the 8 pillow 12.3.0 CVEs here until 2026-11-20
avoigt1121 +1: Claude Opus 5.5The project lead decided D5-A (2026-10-20): a justified acceptance in this repo only. This Space takes identifiers only and opens no caller-supplied image; the fix needs a fleet-wide gradio move (gradio 6.28.0 requires pillow<13). security/accepted-vulns.txt feeds pip-audit --ignore-vuln; the scan fails on an expired entry, and tests/test_accepted_vulns.py fails once the lock moves pillow off 12.3.0, so the acceptance cannot outlive its reason. Scan green. Slice: phase1-knowledge-specialist/s2 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>17acd0c
19 days ago
-
feat: governed ToolUniverse core for the knowledge specialist (s1)
avoigt1121 +1: Claude Opus 5.5The repo from the pdac-spatial-agent template, plus the core every endpoint will sit on (ADR-0001, accepted 2026-10-20): - config/tools_allowlist.yaml: the memo's 28 tools by exact 1.5.6 name; the 12 the five endpoints use are the only ones loaded. - config/sources.yaml: 8 sources with hosts, licences checked 2026-10-20 (Reactome is CC0, not CC BY 4.0; DGIdb unconfirmed, so no DGIdb endpoint), TTLs, rate limits, timeouts, coverage notes. - src/tu_client.py, the only importer of tooluniverse: loads with keep_default_tools=False and load_workspace=False, refuses startup on any model-provider key, a version other than 1.5.6, an extra or forbidden tool, or ToolUniverse's own cache being on. load_workspace=False matters: with any workspace present, 1.5.6 seeds a profile that loads all 2,691 tools and reads workspace and ~/.tooluniverse .env files (found by these tests). - provenance (10 fields per row), pinned output schemas (drift = no rows), SQLite cache that keeps retr…377417d